Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/EEJ6PTn9LAQWnj9hc8xI8v30ckY.roa
File: EEJ6PTn9LAQWnj9hc8xI8v30ckY.roa (raw, json)
Hash identifier: /tCL4EuhY6qZa8kMKvBzb9UUNcyO7eDivSHS/d/JFrg=
Subject key identifier: 10:42:7A:3D:39:FD:2C:04:16:9E:3F:61:73:CC:48:F2:FD:F4:72:46
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018B61446DA5FADD41C56143E2C496A50862
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/EEJ6PTn9LAQWnj9hc8xI8v30ckY.roa
Signing time: Tue 24 Oct 2023 10:39:16 +0000
ROA not before: Tue 24 Oct 2023 10:39:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12695
IP address blocks: 77.90.189.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:61:44:6d:a5:fa:dd:41:c5:61:43:e2:c4:96:a5:08:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Oct 24 10:39:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10427a3d39fd2c04169e3f6173cc48f2fdf47246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:27:26:4b:f4:74:da:f1:90:21:2a:bd:f6:b8:
91:98:31:a8:f4:bd:fc:22:c2:f4:97:9e:58:6f:1d:
6c:04:33:da:42:35:c4:33:0d:c8:7b:24:28:43:21:
6b:5f:c2:cb:4e:61:fc:c5:d7:98:e0:db:6d:1c:44:
fd:26:ef:16:2f:a2:17:0c:1c:1a:54:6b:e0:ff:51:
4c:c1:39:b4:89:1d:88:6b:af:06:10:9a:7d:0c:d6:
f2:14:aa:52:fc:ec:8a:f2:7c:df:29:72:d8:fc:56:
86:b4:a4:23:6b:8b:70:8e:00:28:e8:46:1a:f2:e2:
3f:a5:d7:2a:c7:a7:4a:39:b2:15:be:64:65:49:91:
da:7c:3d:eb:05:a9:62:75:52:69:ef:37:fe:ad:b1:
0d:a9:35:fe:ab:4e:7e:ff:de:dd:bf:b1:f8:0f:e7:
ae:34:22:98:16:61:b9:3b:88:ba:1d:64:3d:c6:f3:
33:3a:57:65:92:8e:d4:06:6e:8e:96:23:12:be:a7:
dd:a8:0a:94:02:6b:eb:ba:8c:1f:11:3f:1e:f4:99:
31:44:9e:55:8d:b6:43:94:56:ff:2d:89:cc:10:43:
42:13:2a:52:02:51:9c:f8:29:fc:f6:fa:6b:a1:37:
18:2a:bb:0a:92:62:64:7e:0b:49:e7:41:dd:75:fd:
8c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:42:7A:3D:39:FD:2C:04:16:9E:3F:61:73:CC:48:F2:FD:F4:72:46
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/EEJ6PTn9LAQWnj9hc8xI8v30ckY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.189.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:a3:17:a6:5c:9f:01:fc:15:ae:2b:b3:16:55:4a:fb:ef:c8:
f0:f1:72:29:e6:92:91:2a:f3:b5:da:1a:df:03:2e:bb:50:aa:
10:ac:a3:43:7f:02:86:5d:de:1f:9d:ce:66:27:35:f9:1c:63:
b3:02:1b:70:79:53:55:62:2a:34:c3:2d:f4:ee:10:2d:c4:09:
01:20:7d:3e:27:1a:e2:a0:19:9f:c8:d5:9e:68:df:dd:7e:2f:
68:7f:36:b0:c4:fb:d8:e9:4d:ed:1a:b6:41:23:db:d0:15:5a:
2a:c9:69:50:09:e3:83:72:33:3f:83:de:45:35:60:46:76:2c:
46:2e:80:42:ac:11:63:1d:85:6e:7a:75:e5:ac:2a:b5:68:86:
ce:d0:29:63:18:fa:62:eb:71:c2:45:37:d4:fb:40:c4:a6:2c:
f1:41:03:9b:c8:06:08:7d:97:19:35:43:c2:23:16:f7:f6:2e:
de:0b:3e:ae:41:9e:fe:b6:9e:48:b8:44:95:17:16:c1:23:92:
88:c0:87:c0:29:66:28:d4:ba:19:dd:ee:d1:ce:17:92:6c:52:
9e:ea:cf:1f:34:83:57:78:9a:c4:c1:f3:cc:aa:61:01:3a:5d:
78:75:2f:a3:6d:cd:2d:ce:5c:76:cf:73:4e:89:76:2a:38:23:
84:eb:de:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:10 2024 by rpki-client on console-fra.rpki-client.org